Add printers as standard (AD) user

[Theilgaard]

In the images I have created so far, a standard user cannot add printers in System Preferences – Print & Fax module.

I found this discussion about this problem:
http://discussions.apple.com/thread.jspa?threadID=1373822&tstart=0

I have not testet this so yet, but what do you do to allow ordinary standard users (in my case logged in through AD) to add printers to their computer?

[Patrick Fergus]

We got this from our Apple technical rep:

in /etc/cups/cupsd.conf

Change:

[code]
Require user @SYSTEM
Order deny,allow
AuthType Default [/code]

to:

[code]
Order allow,deny
Allow all [/code]

I know when I’ve been researching this, Joel (MacTroll) has had a different/better way of handling this. Hopefully he may chime in with an edit of his own, but I can vouch the above works. It’s not very pretty, since you have to route people to either add printers via a print dialog or /System/Library/CoreServices/AddPrinter.app (we’ve made a copy of this and placed it in our standard Dock).

I [i]still[/i] don’t know if it’s possible for non-admins to delete printers through a friendly interface.

– Patrick

[hermana]

I found this to work very well. It gives user access to change a couple other things in Sys Pref.

/usr/libexec/PlistBuddy -c “set rights:system.preferences:class allow” /etc/authorization

[Patrick Fergus]

That would work, but you also are allowing users to enter Preference Panes that you originally may not have intended them to have access to. Editing that portion of /etc/authorization disables the effectiveness of the Security Preference Pane’s “Require password to unlock each system preference”.

– Patrick

[Author]

Posts